apollo-sdk-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard coding patterns for API integration. It correctly identifies the lack of an official SDK for Apollo.io and provides a robust wrapper using Axios and Zod.
- [DATA_EXPOSURE]: The skill follows security best practices by instructing users to store API keys in environment variables (
process.env.APOLLO_API_KEY) rather than hardcoding credentials. - [INDIRECT_PROMPT_INJECTION]: The skill implements strong input and output validation. The provided TypeScript patterns use Zod schemas to validate both the configuration (
ConfigSchema) and the API responses (PeopleSearchResponseSchema), which significantly reduces the risk of processing malicious data from the external API. - [REMOTE_CODE_EXECUTION]: No remote code execution or dangerous command execution patterns were detected. The skill relies on standard, well-known libraries (Axios, Zod).
Audit Metadata